Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/xDAoj25Lcu2BFWLytX3X1ezct18.roa
File: xDAoj25Lcu2BFWLytX3X1ezct18.roa (raw, json)
Hash identifier: FhWs3Tnd6fzOjVFqZHYpZ1gmGKQ6CflfzjWacV50U1w=
Subject key identifier: C4:30:28:8F:6E:4B:72:ED:81:15:62:F2:B5:7D:D7:D5:EC:DC:B7:5F
Certificate issuer: /CN=e8c89b3dcdfa2697b48721308c76b67372a13b15
Certificate serial: 01856F54AB34DC7DB00416A0B86898440705
Authority key identifier: E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/xDAoj25Lcu2BFWLytX3X1ezct18.roa
Signing time: Sun 01 Jan 2023 21:54:57 +0000
ROA not before: Sun 01 Jan 2023 21:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7155
IP address blocks: 194.53.214.0/23 maxlen: 23
194.53.128.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 10 Aug 2023 07:39:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:ab:34:dc:7d:b0:04:16:a0:b8:68:98:44:07:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c89b3dcdfa2697b48721308c76b67372a13b15
Validity
Not Before: Jan 1 21:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c430288f6e4b72ed811562f2b57dd7d5ecdcb75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:77:1d:e4:c9:9c:4a:11:53:40:51:06:3c:
a6:50:e5:70:ed:b4:db:b6:77:4c:b0:fa:d4:ce:e5:
8f:37:48:ad:ff:6c:52:f3:1e:81:13:c3:8c:df:d3:
80:d6:32:0e:48:55:79:f8:93:e8:29:a1:bb:a3:72:
f6:46:9a:20:22:7c:72:ba:1e:f0:7a:3d:10:aa:cb:
04:2a:2e:26:02:56:c6:13:93:a1:7f:9e:b3:35:4b:
57:a7:78:e7:66:a3:0c:32:cf:0e:a6:89:00:3e:a6:
1c:d0:d9:29:f8:98:2a:c3:a8:0f:fa:f4:37:86:3e:
9e:66:7c:67:5b:55:f3:9b:38:d1:0d:3b:5b:f2:6f:
5a:5a:18:ed:f5:db:c8:0e:9d:9c:aa:7c:3b:da:5d:
15:41:df:7e:aa:89:a8:ca:5c:50:28:60:d2:d6:0c:
f6:be:79:9a:98:1f:70:eb:bf:c7:52:3e:f6:56:cb:
a8:c2:87:03:0a:08:73:07:1b:15:44:7b:3f:af:09:
3a:f9:fd:70:60:cb:d8:5c:fb:48:80:c6:52:43:6c:
1c:8d:22:9f:9d:b7:90:f8:34:94:c5:68:d4:66:01:
21:c6:15:e8:8b:fd:1b:c4:69:28:b1:80:76:ad:b9:
a7:04:63:8b:e6:c2:38:c1:96:16:e2:c9:43:d8:63:
50:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:30:28:8F:6E:4B:72:ED:81:15:62:F2:B5:7D:D7:D5:EC:DC:B7:5F
X509v3 Authority Key Identifier:
keyid:E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/xDAoj25Lcu2BFWLytX3X1ezct18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.128.0/23
194.53.214.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:92:c9:64:cb:fb:aa:82:d2:02:5b:04:51:3b:e6:80:b0:d9:
22:55:1f:ba:79:2c:73:df:c1:ca:d7:d6:5e:f7:01:35:16:42:
f4:11:82:5d:ca:e8:86:ef:4b:92:ad:83:94:8d:bb:31:d7:f4:
17:d6:b1:61:c4:61:c1:9c:55:c5:4d:23:0a:7c:6b:fc:e0:46:
22:ca:19:b8:0c:bd:9e:42:45:47:8f:b1:45:ab:db:ca:ae:40:
ea:cd:e3:c2:7d:86:40:66:ee:c8:62:35:f9:f4:cf:2c:38:fd:
22:03:e9:88:8a:9c:17:65:eb:e6:39:e3:57:0a:02:42:fa:72:
84:e4:10:62:5d:fd:fd:c1:e6:75:18:90:7a:39:e3:e9:be:a7:
c6:74:8e:15:8a:56:c4:5f:27:7e:f2:62:49:cd:eb:e7:30:aa:
1f:03:6a:0f:ed:a1:00:52:2e:2a:90:bb:36:d0:60:77:a4:17:
3c:9a:a6:4e:1c:13:d9:18:9e:9f:d3:cf:58:f9:48:b6:08:37:
20:43:0e:fa:55:65:3d:59:8e:92:74:e1:16:15:16:05:0e:a4:
ad:ab:62:78:53:bf:79:69:1c:c9:8b:f6:0c:e8:20:15:6a:c6:
82:42:07:3e:20:d6:cb:bd:94:eb:e2:38:25:28:46:85:81:5b:
f3:9d:1b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:27 2024 by rpki-client on console-ams.rpki-client.org